Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
File: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft (raw, json)
Hash identifier: IOnCeVhHw0OsAPjsezAmFOnDHx9Noq4HD01qgs8OMz4=
Subject key identifier: 54:22:7E:4E:CA:5C:99:1E:36:DE:ED:F9:1B:A2:9C:71:18:D0:74:8D
Authority key identifier: 5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
Certificate issuer: /CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Certificate serial: 0199FD3441762290E8CB349413D7DC9DAFC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
Manifest number: 0FBD
Signing time: Sun 19 Oct 2025 16:01:24 +0000
Manifest this update: Sun 19 Oct 2025 16:01:24 +0000
Manifest next update: Mon 20 Oct 2025 16:01:24 +0000
Files and hashes: 1: 7H5MwTgN1OYiRCO4mG4ENm-WPD0.roa (hash: /sYr4Nv4zqcEaNJCLCU0HKPHMEqgFJB/Zeuuas/Ouic=)
2: Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl (hash: 9hKsrEh9Nl/xJ/jDAM7DLaB3xFVIblyIG0DDhEXachI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 11:18:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:34:41:76:22:90:e8:cb:34:94:13:d7:dc:9d:af:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c64fc20ce1d972f5e3474319048a2ac656df1
Validity
Not Before: Oct 19 16:01:24 2025 GMT
Not After : Oct 20 16:01:24 2025 GMT
Subject: CN=54227e4eca5c991e36deedf91ba29c7118d0748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:19:30:10:d6:a1:be:55:c8:4e:3d:5c:50:
f4:8f:53:c5:5f:f3:e7:93:aa:f6:95:d0:4b:5a:db:
ff:67:a6:a8:11:35:36:58:32:74:48:f7:a8:9a:af:
d5:88:2d:7c:67:a0:43:47:b8:d8:d5:a8:d7:26:68:
c9:e8:66:02:e7:df:fe:bd:0f:78:79:52:e1:1c:d1:
25:43:8c:1a:7e:6e:46:08:f8:9f:29:28:08:67:70:
bb:fe:72:a5:ed:a4:a5:2f:af:55:fb:16:d6:63:be:
80:4c:0d:f6:21:37:f0:f2:be:a5:8b:0a:2e:be:0c:
74:b8:45:62:17:36:ee:ab:ec:fe:be:94:fe:9a:c2:
80:29:98:82:69:ec:0e:ab:63:af:20:d6:6b:0d:f8:
c6:6d:b8:e8:9c:fb:e9:1d:4d:71:cc:2d:95:b2:73:
ed:9d:36:84:aa:fe:b7:de:7c:69:d0:27:19:a7:09:
14:75:e9:ae:e5:13:00:89:6e:92:09:2a:43:91:6d:
56:03:91:fa:11:96:0d:b0:5a:01:62:bc:4f:1c:44:
c1:d3:5e:a3:e0:aa:1f:81:07:40:4a:b5:1b:0a:84:
5a:34:78:f1:70:64:a2:af:78:1f:53:e6:f8:8e:16:
bd:f4:0f:fc:d5:8a:db:04:e3:13:dc:71:21:52:c0:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:22:7E:4E:CA:5C:99:1E:36:DE:ED:F9:1B:A2:9C:71:18:D0:74:8D
X509v3 Authority Key Identifier:
keyid:5E:6C:64:FC:20:CE:1D:97:2F:5E:34:74:31:90:48:A2:AC:65:6D:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/f09788-9869-4f12-9f1e-ac4de169adce/1/Xmxk_CDOHZcvXjR0MZBIoqxlbfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d3:7a:f0:ac:f6:9c:42:1b:f1:38:fb:28:36:5f:e1:cb:0e:
20:d8:2f:31:1e:df:38:e9:ad:fb:4b:37:18:db:d1:a2:09:ef:
e1:c0:46:f6:08:3e:1a:cc:ea:63:7e:08:12:d9:a2:13:d6:94:
e9:42:57:d6:0f:30:a9:d1:44:1d:db:6f:fd:de:d8:2b:d2:6a:
84:a4:e7:13:c4:3e:44:e1:5f:ab:4b:93:d7:9e:e1:5e:f0:6e:
e9:ab:84:2b:81:4d:3c:61:c2:db:50:60:9f:b4:20:b7:14:94:
5e:e1:c2:bd:d5:3e:1f:d1:56:0a:61:f3:38:3f:e5:3c:7a:96:
72:1d:78:5b:7a:5e:42:52:da:a2:1a:ce:3a:dc:15:5c:a4:d3:
4b:ec:5c:39:64:f6:77:9b:96:ce:8a:87:ff:ff:3c:c7:d5:0a:
58:03:c3:3c:1f:9f:90:b6:86:73:d5:67:48:84:36:42:76:c1:
25:b3:05:83:48:6a:c7:32:05:59:95:5e:1d:26:a0:81:91:fb:
40:59:f8:af:a8:ca:4d:03:98:6d:83:bb:db:13:34:0f:5e:1a:
f9:6f:c6:2f:4f:88:a1:51:57:17:ed:ab:ca:d9:0f:d1:f6:50:
68:17:ca:ab:ed:07:d4:58:b9:1f:81:9c:c8:8a:14:f8:37:80:
04:b9:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:31:11 2025 by rpki-client